[SECURITY] [DSA 4204-1] imagemagick security update

2018-05-1816:59:44

lists.debian.org

0.014 Low

EPSS

Percentile

86.6%

JSON

Debian Security Advisory DSA-4204-1 [email protected]
https://www.debian.org/security/ Sebastien Delafond
May 18, 2018 https://www.debian.org/security/faq

Package : imagemagick
CVE ID : CVE-2017-10995 CVE-2017-11533 CVE-2017-11535 CVE-2017-11639
CVE-2017-13143 CVE-2017-17504 CVE-2017-17879 CVE-2018-5248
Debian Bug : 867748 869827 869834 870012 870065 885125 885340 886588

This update fixes several vulnerabilities in imagemagick, a graphical
software suite. Various memory handling problems or issues about
incomplete input sanitizing would result in denial of service or
memory disclosure.

For the oldstable distribution (jessie), these problems have been fixed
in version 8:6.8.9.9-5+deb8u12.

We recommend that you upgrade your imagemagick packages.

For the detailed security status of imagemagick please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/imagemagick

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian9ppc64ellibmagickcore-6.q16-dev< 6.9.7.4+dfsg-11+deb9u5libmagickcore-6.q16-dev_6.9.7.4+dfsg-11+deb9u5_ppc64el.deb
Debian9mipsellibmagickcore-6.q16hdri-dev< 6.9.7.4+dfsg-11+deb9u5libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian7allimagemagick-common< 6.7.7.10-5+deb7u19imagemagick-common_6.7.7.10-5+deb7u19_all.deb
Debian9mips64elimagemagick-6.q16< 6.9.7.4+dfsg-11+deb9u5imagemagick-6.q16_6.9.7.4+dfsg-11+deb9u5_mips64el.deb
Debian9mipselimagemagick-6.q16hdri< 6.9.7.4+dfsg-11+deb9u5imagemagick-6.q16hdri_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian9mipsellibimage-magick-q16-perl-dbgsym< 6.9.7.4+dfsg-11+deb9u5libimage-magick-q16-perl-dbgsym_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian9mipsellibmagickcore-6.q16-3< 6.9.7.4+dfsg-11+deb9u5libmagickcore-6.q16-3_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian9arm64libmagick++-6.q16hdri-7< 6.9.7.4+dfsg-11+deb9u2libmagick++-6.q16hdri-7_6.9.7.4+dfsg-11+deb9u2_arm64.deb
Debian8mipslibmagick++-6.q16-5< 6.8.9.9-5+deb8u12libmagick++-6.q16-5_6.8.9.9-5+deb8u12_mips.deb
Debian9armellibmagick++-6.q16hdri-dev< 6.9.7.4+dfsg-11+deb9u4libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-11+deb9u4_armel.deb

OS	Version	Architecture	Package	Version	Filename
Debian	9	ppc64el	libmagickcore-6.q16-dev	< 6.9.7.4+dfsg-11+deb9u5	libmagickcore-6.q16-dev_6.9.7.4+dfsg-11+deb9u5_ppc64el.deb
Debian	9	mipsel	libmagickcore-6.q16hdri-dev	< 6.9.7.4+dfsg-11+deb9u5	libmagickcore-6.q16hdri-dev_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian	7	all	imagemagick-common	< 6.7.7.10-5+deb7u19	imagemagick-common_6.7.7.10-5+deb7u19_all.deb
Debian	9	mips64el	imagemagick-6.q16	< 6.9.7.4+dfsg-11+deb9u5	imagemagick-6.q16_6.9.7.4+dfsg-11+deb9u5_mips64el.deb
Debian	9	mipsel	imagemagick-6.q16hdri	< 6.9.7.4+dfsg-11+deb9u5	imagemagick-6.q16hdri_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian	9	mipsel	libimage-magick-q16-perl-dbgsym	< 6.9.7.4+dfsg-11+deb9u5	libimage-magick-q16-perl-dbgsym_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian	9	mipsel	libmagickcore-6.q16-3	< 6.9.7.4+dfsg-11+deb9u5	libmagickcore-6.q16-3_6.9.7.4+dfsg-11+deb9u5_mipsel.deb
Debian	9	arm64	libmagick++-6.q16hdri-7	< 6.9.7.4+dfsg-11+deb9u2	libmagick++-6.q16hdri-7_6.9.7.4+dfsg-11+deb9u2_arm64.deb
Debian	8	mips	libmagick++-6.q16-5	< 6.8.9.9-5+deb8u12	libmagick++-6.q16-5_6.8.9.9-5+deb8u12_mips.deb
Debian	9	armel	libmagick++-6.q16hdri-dev	< 6.9.7.4+dfsg-11+deb9u4	libmagick++-6.q16hdri-dev_6.9.7.4+dfsg-11+deb9u4_armel.deb